CVE-2014-6288: High severity in2code powermail vulnerability
Published Oct 3, 2014
·Updated
The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vectors.
Affected Software
12 affected componentsFixes available
Alex Kellner Powermail Typo3=2.0.0
Alex Kellner Powermail Typo3=2.0.1
Alex Kellner Powermail Typo3=2.0.2
Alex Kellner Powermail Typo3=2.0.3
Alex Kellner Powermail Typo3=2.0.4
Alex Kellner Powermail Typo3=2.0.5
Alex Kellner Powermail Typo3=2.0.6
Alex Kellner Powermail Typo3=2.0.7
Alex Kellner Powermail Typo3=2.0.8
Alex Kellner Powermail Typo3=2.0.9
Alex Kellner Powermail Typo3=2.0.10
composer/in2code/powermail>=2.0.0<2.0.11
2.0.11
Event History
Oct 3, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
May 17, 2022
Advisory Published
via GitHub·04:31 AM
Data Sourced
via GitHub·04:31 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-6288?
CVE-2014-6288 is considered a moderate severity vulnerability due to its ability to allow remote attackers to bypass CAPTCHA protection.
2
How do I fix CVE-2014-6288?
To fix CVE-2014-6288, you should upgrade the powermail extension to version 2.0.11 or later.
3
What versions of powermail are affected by CVE-2014-6288?
CVE-2014-6288 affects powermail versions 2.0.0 through 2.0.10.
4
Is my TYPO3 site vulnerable if I use powermail 2.0.10 or earlier?
Yes, if you are using powermail version 2.0.10 or earlier, your TYPO3 site is vulnerable to CVE-2014-6288.
5
What impact does CVE-2014-6288 have on my TYPO3 installation?
CVE-2014-6288 allows remote attackers to bypass CAPTCHA protection, potentially exposing your TYPO3 forms to spam or other malicious activities.